🔒 MCPSafe Security Report

MCP Server Security & Performance Analysis — v0.2.0

Scan ID
3d193b32…
Started
2026-04-14 13:28:16 UTC
Finished
2026-04-14 13:33:44 UTC
Duration
538.0s
Overall
MEDIUM

Summary

106
tests
MEDIUM 2 (1.9%)
LOW 2 (1.9%)
INFO 13 (12.3%)
PASS 101 (95.3%)
CRITICAL 0
HIGH 0
MEDIUM 2
LOW 2
INFO 13
PASS 101
Total: 106 Passed: 101 Failed: 5 Duration: 538.0s

Server Information

Server Name
unknown
Version
unknown
Protocol
unknown
Transport
HTTP
Target
https://docs.mcp.cloudflare.com/mcp
Discovered At
2026-04-14 13:28:20 UTC
Tools
2
Resources
0
Prompts
1
Exposed Tools
search_cloudflare_documentation migrate_pages_to_workers_guide

Findings (106 tests)

Test ID Severity Test Name Description / Details Duration
SECURITY  ·  77 tests
T07-002-02 MEDIUM Malformed Token: Empty bearer token
Unexpected exception: LocalProtocolError
Illegal header value b'Bearer '
 769ms
T07-005 MEDIUM CORS Misconfiguration
Server returns 'Access-Control-Allow-Origin: *' — any browser origin can connect to this MCP server.
Wildcard CORS — any browser origin can connect to this MCP server
Remediation:
Restrict the CORS origin allowlist to known, trusted domains. A wildcard allows a malicious web page to make authenticated cross-origin calls to this MCP server.
729ms
T07-010 LOW Duplicate Initialize (Replay Attack)
Server accepted a second initialize() call on an already active session. The session remained usable, but the server sta…
Double initialize() succeeded. Post-replay list_tools() succeeded — session is still functional but capabilities or internal state may have been altered.
Remediation:
The server should reject or ignore repeated initialize() calls. Accepting them enables mid-session protocol version downgrade and capability reset attacks.
173ms
T07-013 LOW Protocol Version Abuse
Server did not negotiate a recognised MCP protocol version (version is empty or unknown).
Remediation:
Ensure the server returns a valid protocolVersion in its initialize response (e.g. '2024-11-05'). Clients rely on this to select compatible behaviour.
0ms
T07-001 INFO Unauthenticated MCP Access
Unexpected HTTP status 404 on unauthenticated probe.
Unexpected status: 404
 662ms
T07-002-01 INFO Malformed Token: Invalid bearer token HTTP 404 for Invalid bearer token — unable to confirm rejection. 717ms
T07-002-03 INFO Malformed Token: Basic auth instead of Bearer HTTP 404 for Basic auth instead of Bearer — unable to confirm rejection. 780ms
T07-002-04 INFO Malformed Token: Wrong API key format HTTP 404 for Wrong API key format — unable to confirm rejection. 713ms
T07-003 INFO Resource URI Path Traversal Server advertises no resources — path traversal test skipped. 0ms
T07-006 INFO Process Privilege Check Process privilege check requires STDIO transport — skipped (transport='http'). 0ms
T07-007 INFO Environment Variable Probe Environment variable probe requires STDIO transport — skipped (transport='http'). 0ms
T13-002 INFO Unsolicited Sampling Requests MCP client SDK does not expose an incoming-request hook; unsolicited sampling detection relies on capability audit (T13-001). 1292ms
T17-002 INFO Description Fingerprint Inventory
Catalogued 3 SHA-256 description fingerprints. Use `mcpsafe compare` to detect drift across scans.
tool:search_cloudflare_documentation = fb5bf70a271f9ccaf9062c13f058b203e21fe88ee413284e495d9035eb2c7513 tool:migrate_pages_to_workers_guide = fc1b50a88c58bc18d7add334587e6d1624d0b88357cd88486ea9bd6f1be37808 prompt:workers-prompt-full = 07abf707ebcefee88382f79d897d6044c2bbd61df9689f3592e599d9154c42b3
 0ms
T18-001 INFO SSRF — Summary Server does not expose resources/read; SSRF probes skipped. 0ms
T02-search_cloudflare_documentation-PI-001 PASS Injection PI-001 → search_cloudflare_documentation
Tool 'search_cloudflare_documentation' handled PI-001 (Classic override) gracefully.
Response excerpt: '<result>\n<url>https://developers.cloudflare.com/https://developers.cloudflare.com/waf/detections/ai-security-for-apps/prompt-injection/</url>\n<title></title>\n<text>\n### Why a score instead of a boolea'
 2475ms
T02-search_cloudflare_documentation-PI-002 PASS Injection PI-002 → search_cloudflare_documentation
Tool 'search_cloudflare_documentation' handled PI-002 (Newline injection) gracefully.
Response excerpt: '<result>\n<url>https://developers.cloudflare.com/https://developers.cloudflare.com/ai-search/configuration/system-prompt/</url>\n<title></title>\n<text>\n# System prompt\n\nSystem prompts allow you to guide'
 1335ms
T02-search_cloudflare_documentation-PI-003 PASS Injection PI-003 → search_cloudflare_documentation
Tool 'search_cloudflare_documentation' handled PI-003 (XML tag injection) gracefully.
Response excerpt: ''
 1626ms
T02-search_cloudflare_documentation-PI-004 PASS Injection PI-004 → search_cloudflare_documentation
Tool 'search_cloudflare_documentation' handled PI-004 (SQL injection probe) gracefully.
Response excerpt: ''
 2140ms
T02-search_cloudflare_documentation-PI-005 PASS Injection PI-005 → search_cloudflare_documentation
Tool 'search_cloudflare_documentation' handled PI-005 (Shell injection) gracefully.
Response excerpt: '<result>\n<url>https://developers.cloudflare.com/https://developers.cloudflare.com/workers/wrangler/commands/general/</url>\n<title></title>\n<text>\n## `auth`\n\n### `auth token`\n\nRetrieve your current aut'
 2062ms
T02-search_cloudflare_documentation-PI-006 PASS Injection PI-006 → search_cloudflare_documentation
Tool 'search_cloudflare_documentation' handled PI-006 (Backtick injection) gracefully.
Response excerpt: '<result>\n<url>https://developers.cloudflare.com/https://developers.cloudflare.com/workers-ai/models/kimi-k2.5/</url>\n<title></title>\n<text>\n* `id` ` string ` required \n '
 2397ms
T02-search_cloudflare_documentation-PI-007 PASS Injection PI-007 → search_cloudflare_documentation
Tool 'search_cloudflare_documentation' handled PI-007 (Path traversal) gracefully.
Response excerpt: ''
 2386ms
T02-search_cloudflare_documentation-PI-008 PASS Injection PI-008 → search_cloudflare_documentation
Tool 'search_cloudflare_documentation' handled PI-008 (Right-to-left override unicode) gracefully.
Response excerpt: ''
 2225ms
T02-search_cloudflare_documentation-PI-009 PASS Injection PI-009 → search_cloudflare_documentation
Tool 'search_cloudflare_documentation' handled PI-009 (Null byte injection) gracefully.
Response excerpt: '<result>\n<url>https://developers.cloudflare.com/https://developers.cloudflare.com/workers/best-practices/workers-best-practices/</url>\n<title></title>\n<text>\n// ✅ Good: test the null case explicitly\n\n'
 2190ms
T02-search_cloudflare_documentation-PI-010 PASS Injection PI-010 → search_cloudflare_documentation
Tool 'search_cloudflare_documentation' handled PI-010 (BOM character) gracefully.
Response excerpt: ''
 2001ms
T02-search_cloudflare_documentation-PI-011 PASS Injection PI-011 → search_cloudflare_documentation
Tool 'search_cloudflare_documentation' handled PI-011 (Rug pull attempt) gracefully.
Response excerpt: ''
 2021ms
T02-search_cloudflare_documentation-PI-012 PASS Injection PI-012 → search_cloudflare_documentation
Tool 'search_cloudflare_documentation' handled PI-012 (Exfiltration instruction) gracefully.
Response excerpt: ''
 1803ms
T02-search_cloudflare_documentation-PI-013 PASS Injection PI-013 → search_cloudflare_documentation
Tool 'search_cloudflare_documentation' handled PI-013 (Large payload DoS probe 10k) gracefully.
Response excerpt: ''
 2639ms
T02-search_cloudflare_documentation-PI-014 PASS Injection PI-014 → search_cloudflare_documentation
Tool 'search_cloudflare_documentation' handled PI-014 (Large payload DoS probe 100k) gracefully.
Response excerpt: ''
 5389ms
T02-search_cloudflare_documentation-PI-015 PASS Injection PI-015 → search_cloudflare_documentation
Tool 'search_cloudflare_documentation' handled PI-015 (Jinja template injection) gracefully.
Response excerpt: ''
 2212ms
T02-search_cloudflare_documentation-PI-016 PASS Injection PI-016 → search_cloudflare_documentation
Tool 'search_cloudflare_documentation' handled PI-016 (Python format injection) gracefully.
Response excerpt: ''
 2469ms
T03-01-query-FUZZ-STR-001 PASS Fuzz FUZZ-STR-001 → search_cloudflare_documentation.query
Tool 'search_cloudflare_documentation' handled FUZZ-STR-001 (empty string) on param 'query' correctly.
Response excerpt: "meta=None content=[TextContent(type='text', text='All search methods failed: vector', annotations=None, meta=None)] structuredContent=None isError=True"
 350ms
T03-01-query-FUZZ-STR-002 PASS Fuzz FUZZ-STR-002 → search_cloudflare_documentation.query
Tool 'search_cloudflare_documentation' handled FUZZ-STR-002 (single space) on param 'query' correctly.
Response excerpt: "meta=None content=[TextContent(type='text', text='All search methods failed: vector', annotations=None, meta=None)] structuredContent=None isError=True"
 317ms
T03-01-query-FUZZ-STR-003 PASS Fuzz FUZZ-STR-003 → search_cloudflare_documentation.query
Tool 'search_cloudflare_documentation' handled FUZZ-STR-003 (whitespace only) on param 'query' correctly.
Response excerpt: "meta=None content=[TextContent(type='text', text='All search methods failed: vector', annotations=None, meta=None)] structuredContent=None isError=True"
 216ms
T03-01-query-FUZZ-STR-004 PASS Fuzz FUZZ-STR-004 → search_cloudflare_documentation.query
Tool 'search_cloudflare_documentation' returned a structured error for FUZZ-STR-004 (null value) on param 'query' — hand…
McpError: MCP error -32602: Invalid arguments for tool search_cloudflare_documentation: [ { "code": "invalid_type", "expected": "string", "received": "null", "path": [ "query" ], "message": "Expected string, received null" } ]
 260ms
T03-01-query-FUZZ-STR-005 PASS Fuzz FUZZ-STR-005 → search_cloudflare_documentation.query
Tool 'search_cloudflare_documentation' returned a structured error for FUZZ-STR-005 (integer as string field) on param '…
McpError: MCP error -32602: Invalid arguments for tool search_cloudflare_documentation: [ { "code": "invalid_type", "expected": "string", "received": "number", "path": [ "query" ], "message": "Expected string, received number" } ]
 244ms
T03-01-query-FUZZ-STR-006 PASS Fuzz FUZZ-STR-006 → search_cloudflare_documentation.query
Tool 'search_cloudflare_documentation' returned a structured error for FUZZ-STR-006 (boolean as string field) on param '…
McpError: MCP error -32602: Invalid arguments for tool search_cloudflare_documentation: [ { "code": "invalid_type", "expected": "string", "received": "boolean", "path": [ "query" ], "message": "Expected string, received boolean" } ]
 169ms
T03-01-query-FUZZ-STR-007 PASS Fuzz FUZZ-STR-007 → search_cloudflare_documentation.query
Tool 'search_cloudflare_documentation' returned a structured error for FUZZ-STR-007 (list as string field) on param 'que…
McpError: MCP error -32602: Invalid arguments for tool search_cloudflare_documentation: [ { "code": "invalid_type", "expected": "string", "received": "array", "path": [ "query" ], "message": "Expected string, received array" } ]
 228ms
T03-01-query-FUZZ-STR-008 PASS Fuzz FUZZ-STR-008 → search_cloudflare_documentation.query
Tool 'search_cloudflare_documentation' returned a structured error for FUZZ-STR-008 (dict as string field) on param 'que…
McpError: MCP error -32602: Invalid arguments for tool search_cloudflare_documentation: [ { "code": "invalid_type", "expected": "string", "received": "object", "path": [ "query" ], "message": "Expected string, received object" } ]
 290ms
T03-01-query-FUZZ-STR-009 PASS Fuzz FUZZ-STR-009 → search_cloudflare_documentation.query
Tool 'search_cloudflare_documentation' handled FUZZ-STR-009 (very long string 10k) on param 'query' correctly.
Response excerpt: "meta=None content=[TextContent(type='text', text='', annotations=None, meta=None)] structuredContent=None isError=False"
 2266ms
T03-01-query-FUZZ-STR-010 PASS Fuzz FUZZ-STR-010 → search_cloudflare_documentation.query
Tool 'search_cloudflare_documentation' handled FUZZ-STR-010 (newlines and tabs) on param 'query' correctly.
Response excerpt: "meta=None content=[TextContent(type='text', text='All search methods failed: vector', annotations=None, meta=None)] structuredContent=None isError=True"
 415ms
T03-01-query-FUZZ-STR-011 PASS Fuzz FUZZ-STR-011 → search_cloudflare_documentation.query
Tool 'search_cloudflare_documentation' handled FUZZ-STR-011 (null byte in string) on param 'query' correctly.
Response excerpt: "meta=None content=[TextContent(type='text', text='', annotations=None, meta=None)] structuredContent=None isError=False"
 1747ms
T03-01-query-FUZZ-STR-012 PASS Fuzz FUZZ-STR-012 → search_cloudflare_documentation.query
Tool 'search_cloudflare_documentation' handled FUZZ-STR-012 (all unicode planes) on param 'query' correctly.
Response excerpt: "meta=None content=[TextContent(type='text', text='', annotations=None, meta=None)] structuredContent=None isError=False"
 1935ms
T04-001 PASS Rug Pull Detection (Mutation Check) All 2 tool description(s) were stable across two list_tools() calls (3 s apart). 3173ms
T04-002 PASS Hidden Instruction Scan No suspicious patterns found in 2 tool description(s). 0ms
T04-003 PASS Cross-Tool Reference Detection No cross-tool name references found across 2 tool descriptions. 0ms
T04-004 PASS Schema Field Injection Check All 2 tool inputSchema(s) contain only sanctioned JSON Schema fields. 0ms
T04-005 PASS Tool Count Stability Check
Tool count stable at 2 across 5 polls (2.5s window).
Counts per poll: [2, 2, 2, 2, 2]
 3496ms
T07-004 PASS Credentials in Error Messages
No credential patterns found in error response for non-existent tool call.
Error excerpt: 'MCP error -32602: Tool mcpsafe_nonexistent_tool_probe not found'
 198ms
T07-008 PASS Invalid Tool Name Rejection Server correctly rejected all invalid tool names. 1236ms
T07-009 PASS Oversized Argument Rejection Server correctly rejected oversized tool arguments. 903ms
T07-011 PASS Deeply Nested Argument (JSON Bomb) Server rejected deeply nested JSON argument. 1ms
T07-012 PASS Unicode Homoglyph Tool Name Spoofing Server rejected homoglyph tool name 'seаrch_cloudflare_documentation' correctly. 324ms
T09-001 PASS Output Sanitization — Summary All 2 tool outputs and 0 resource reads passed PI-marker scanning. 1287ms
T09-TOOL-migrate_pages_to_workers_gui PASS Output Sanitization → migrate_pages_to_workers_guide Tool 'migrate_pages_to_workers_guide' output clean — no prompt-injection markers detected. 933ms
T09-TOOL-search_cloudflare_documentat PASS Output Sanitization → search_cloudflare_documentation Tool 'search_cloudflare_documentation' output clean — no prompt-injection markers detected. 352ms
T10-001 PASS Cross-Session Data Leakage Marker planted in 1 tool(s) via session A did not leak into an independent session B — state appears correctly partitioned. 6512ms
T11-001 PASS Timing Side-Channel — Summary Probed 1 tool(s); no timing oracles detected. 16914ms
T11-TOOL-search_cloudflare_documentat PASS Timing Side-Channel → search_cloudflare_documentation Tool 'search_cloudflare_documentation' does not appear to leak timing information (mean 2074.0 ms vs 1866.9 ms, ratio 1.11×). 16913ms
T12-001 PASS Error Secret Leakage — Summary Probed 2 tool(s) and 0 resources; no secret patterns detected in error messages. 4457ms
T12-TOOL-migrate_pages_to_workers_gui PASS Error Secret Leakage → migrate_pages_to_workers_guide Tool 'migrate_pages_to_workers_guide' never errored on malformed inputs — nothing to scan. 193ms
T12-TOOL-search_cloudflare_documentat PASS Error Secret Leakage → search_cloudflare_documentation Tool 'search_cloudflare_documentation' errored on 2 malformed input(s); no secret patterns found in error text. 4262ms
T13-001 PASS Sampling Capability Advertisement Server does not advertise the 'sampling' capability. 0ms
T13-003 PASS Sampling Abuse — Summary No sampling-abuse surface detected. 1292ms
T14-001 PASS Notification Flood Rate Server sent 0 notifications during a 5s quiet window (0.0/sec) — well within expected bounds. 6221ms
T14-002 PASS Notification Flood — Summary No notification-flood risk detected. 6221ms
T15-001 PASS Reentrancy — Summary Probed 1 tool(s) with 6 concurrent invocations each; no state-bleed detected. 4010ms
T15-TOOL-search_cloudflare_documentat PASS Reentrancy → search_cloudflare_documentation 6 concurrent calls to 'search_cloudflare_documentation' returned independent results — no state bleed detected. 4009ms
T16-001 PASS Tool Set Drift Tool inventory stable across snapshots. 5018ms
T16-002 PASS Resource Set Drift Resource inventory stable. 0ms
T16-004 PASS Server Capability Drift Server capabilities stable. 0ms
T16-005 PASS Capability Creep — Summary All capability surfaces stable over 3s window. 5018ms
T17-001 PASS Cross-Session Hash Drift All 3 descriptions match byte-for-byte across two independent sessions. 3541ms
T19-001 PASS Non-ASCII Identifiers All identifiers are pure ASCII. 0ms
T19-002 PASS Confusable / Homoglyph Characters No Unicode confusables detected in identifiers. 0ms
T19-003 PASS Mixed-Script Identifiers No mixed-script identifiers found. 0ms
T19-004 PASS Invisible / Directional Characters No invisible characters in identifiers. 0ms
T19-005 PASS Homoglyph Scan — Summary Scanned 3 identifier(s); no impersonation signals detected. 0ms
DISCOVERY  ·  8 tests
T01-001 INFO Server Identity
Server did not advertise: name, version. Got name='unknown' version='unknown' protocol='unknown'.
Remediation:
Ensure the MCP server returns a populated 'serverInfo' object in its initialize response (name and version fields).
0ms
T01-002 PASS Tool Enumeration
Discovered 2 tool(s): search_cloudflare_documentation, migrate_pages_to_workers_guide.
search_cloudflare_documentation: 'Search the Cloudflare documentation.\n\n\t\tThis tool should be used to answer any q' migrate_pages_to_workers_guide: 'ALWAYS read this guide before migrating Pages projects to Workers.'
 0ms
T01-003 PASS Resource Enumeration Discovered 0 resource(s). 0ms
T01-004 PASS Prompt Enumeration
Discovered 1 prompt(s): workers-prompt-full.
workers-prompt-full: 'Detailed prompt for generating Cloudflare Workers code (and other developer plat' (0 arg(s))
 0ms
T01-005 PASS Tool Description Completeness All 2 tool(s) have non-empty descriptions. 0ms
T01-006 PASS Tool Schema Validity All 2 tool(s) have valid JSON Schema inputSchema. 0ms
T01-007 PASS Duplicate Tool Names All 2 tool name(s) are unique. 0ms
T01-008 PASS Tool Description Length All 2 tool description(s) are within the 2,000-character limit. 0ms
SCHEMA  ·  8 tests
T06-004 INFO Return Type Consistency No tools returned comparable JSON responses — consistency check not applicable. 0ms
T06-001 PASS Schema Structural Validity All 2 tool inputSchema(s) are structurally valid. 0ms
T06-002-search_cloudflare_documentation PASS Required Enforcement: search_cloudflare_documentation
Tool 'search_cloudflare_documentation' correctly raised an error when called with missing required fields.
McpError: MCP error -32602: Invalid arguments for tool search_cloudflare_documentation: [ { "code": "invalid_type", "expected": "string", "received": "undefined", "path": [ "query" ]
 194ms
T06-003 PASS additionalProperties Strictness All 2 tool(s) have 'additionalProperties': false. 0ms
T06-005 PASS Overly Permissive Schema Detection All 2 tool schema(s) are acceptably strict. 0ms
T06-006-migrate_pages_to_workers_guide PASS Description Quality: migrate_pages_to_workers_guide
Tool 'migrate_pages_to_workers_guide' has an adequate description (66 chars).
Description: 'ALWAYS read this guide before migrating Pages projects to Workers.'
 0ms
T06-006-search_cloudflare_documentation PASS Description Quality: search_cloudflare_documentation
Tool 'search_cloudflare_documentation' has an adequate description (541 chars).
Description: 'Search the Cloudflare documentation.\n\n\t\tThis tool should be used to answer any question about Cloudflare products or features, including:\n\t\t- Workers, Pages, R2, Images, Stream, D1, Durable Objects, K'
 0ms
T16-003 PASS Tool Schema Required-Field Drift No required-field drift detected. 0ms
PERFORMANCE  ·  13 tests
T08-003-00 INFO Resource Read Latency No resources to benchmark. 0ms
T05-001 PASS 10 Simultaneous Calls
All 10 concurrent calls to 'search_cloudflare_documentation' succeeded with no data leakage.
min=1669ms mean=2064ms max=2411ms
 2720ms
T05-002 PASS 50 Sequential Rapid Calls
p50=1925ms p95=2596ms p99=3182ms
{ "tool": "search_cloudflare_documentation", "calls": 50, "errors": 0, "min_ms": 1431.19, "mean_ms": 1960.9, "max_ms": 3182.28, "p50_ms": 1925.46, "p95_ms": 2595.89, "p99_ms": 3182.28 }
 98045ms
T05-003 PASS 100 Concurrent Calls (Stress Test)
All 100 calls succeeded. Throughput: 5.0 calls/sec
Throughput: 5.0 calls/sec
 20200ms
T05-004 PASS Connection Stability Under Rapid Reconnect
Tool list consistent across all 5 reconnects: ['migrate_pages_to_workers_guide', 'search_cloudflare_documentation'].
Reconnects: 5. Tools per connect: 2.
 22805ms
T08-001-01 PASS Baseline Latency: search_cloudflare_documentation
Tool 'search_cloudflare_documentation': mean=2244ms min=1233ms max=4463ms (5 samples).
{ "search_cloudflare_documentation": { "mean_ms": 2243.91, "min_ms": 1232.71, "max_ms": 4462.99, "samples": [ 4462.99, 1796.89, 1712.11, 2014.83, 1232.71 ] } }
 11220ms
T08-001-02 PASS Baseline Latency: migrate_pages_to_workers_guide
Tool 'migrate_pages_to_workers_guide': mean=392ms min=190ms max=586ms (5 samples).
{ "migrate_pages_to_workers_guide": { "mean_ms": 392.08, "min_ms": 189.69, "max_ms": 586.29, "samples": [ 189.69, 586.29, 547.78, 310.78, 325.88 ] } }
 1960ms
T08-002 PASS Tool Discovery Latency
list_tools() mean=364ms min=216ms max=528ms.
{ "list_tools": { "mean_ms": 364.42, "min_ms": 216.47, "max_ms": 528.26, "samples": [ 528.26, 354.31, 254.23, 216.47, 468.85 ] } }
 1822ms
T08-004 PASS Cold Start Detection
No significant cold-start penalty detected (ratio 1.4×, threshold 10×).
Call 1 (cold): 2344ms Calls 2-5 (warm): 2073ms, 1868ms, 1448ms, 1536ms Warm mean: 1731ms Ratio: 1.4×
 9269ms
T08-005 PASS Latency Degradation Under Load
Latency stable under load: baseline 1318ms, load p95 2596ms (ratio 2.0×).
Baseline mean: 1318ms Load p95: 2596ms Degradation ratio: 2.0×
 0ms
T20-001 PASS Response-Size Drift Response sizes stable (11061→11061 bytes, ratio 1.00×). 73886ms
T20-002 PASS Latency Drift Latency stable (1800.1→1742.8ms, ratio 0.97×). 73886ms
T20-004 PASS Memory Leak — Summary No memory growth signals over 39 probe calls. 73886ms